Wired news reports on a new vulnerability in MS Outlook, this time related to those annoying VCard attachments. Here’s The Register’s take on it, and ZDNet’s report. A patch is available from Microsoft.
The bug was discovered by @stake, and is just conceptual – no real-world exploits have been reported, and if everyone keeps up with the patches, none will be. They worked with Microsoft to make sure the patch was available before publishing their advisory.